Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/HWACOM/dc89Xgodjf_Hi7zhidWmyqNs2Z0.roa
File:                     dc89Xgodjf_Hi7zhidWmyqNs2Z0.roa (raw, json)
Hash identifier:          Hcg0CcrRBmJPNJB8W0c8x3mlDFMwmZFgatKdH2zfYbM=
Subject key identifier:   75:CF:3D:5E:0A:1D:8D:FF:C7:8B:BC:E1:89:D5:A6:CA:A3:6C:D9:9D
Certificate issuer:       /CN=D39A02AE150862D15FB727C511B104D63EFB4686
Certificate serial:       100A
Authority key identifier: D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/dc89Xgodjf_Hi7zhidWmyqNs2Z0.roa
Signing time:             Thu 15 Sep 2022 02:46:47 +0000
ROA not before:           Thu 15 Sep 2022 02:46:47 +0000
ROA not after:            Wed 06 Sep 2023 03:00:35 +0000
asID:                     63199
IP address blocks:        103.124.149.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4106 (0x100a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D39A02AE150862D15FB727C511B104D63EFB4686
        Validity
            Not Before: Sep 15 02:46:47 2022 GMT
            Not After : Sep  6 03:00:35 2023 GMT
        Subject: CN=75CF3D5E0A1D8DFFC78BBCE189D5A6CAA36CD99D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b7:be:be:57:44:36:3f:7a:ed:3a:4a:f1:a5:
                    48:b6:03:c1:8b:a4:67:13:32:eb:10:a7:42:2e:15:
                    de:52:1f:44:8d:b5:23:18:f4:a1:99:b5:2a:b2:15:
                    85:f5:30:5e:fd:05:fc:8a:c6:01:c8:10:58:63:38:
                    c0:1f:9a:13:95:19:3d:c1:a5:70:d2:4c:8a:97:c0:
                    f4:33:83:d2:06:8c:ec:f4:ba:f9:1f:96:46:dd:1a:
                    70:58:ed:c7:bf:72:c3:03:6a:06:f8:84:25:75:28:
                    a7:90:64:e3:da:ed:e3:04:0c:f7:78:82:cc:f3:3d:
                    02:00:0b:dd:ea:8a:eb:9d:f7:00:2f:c9:6f:1b:ce:
                    04:f7:4b:b5:16:85:c8:a1:4f:e2:34:a7:4b:79:53:
                    40:76:b7:09:a6:c1:d0:bb:85:b7:23:8c:66:58:57:
                    d6:1d:71:71:c6:0e:e7:1c:c7:50:2c:0b:56:a1:82:
                    f3:44:8b:04:82:dc:1c:f9:cd:78:3e:66:6a:eb:cf:
                    94:6d:e0:71:7a:2e:31:c0:98:5c:01:fa:bc:d3:52:
                    f1:f5:86:98:79:f4:2d:4a:21:ef:c7:65:ae:ff:3b:
                    18:f5:3d:7e:3c:ca:32:34:5b:ba:be:39:a9:4f:ec:
                    36:e1:38:84:a4:f5:42:f0:d1:9a:95:e1:6b:43:f0:
                    36:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CF:3D:5E:0A:1D:8D:FF:C7:8B:BC:E1:89:D5:A6:CA:A3:6C:D9:9D
            X509v3 Authority Key Identifier:
                keyid:D3:9A:02:AE:15:08:62:D1:5F:B7:27:C5:11:B1:04:D6:3E:FB:46:86

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/05oCrhUIYtFftyfFEbEE1j77RoY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/05oCrhUIYtFftyfFEbEE1j77RoY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/HWACOM/dc89Xgodjf_Hi7zhidWmyqNs2Z0.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:56:7c:9f:39:1d:80:28:f8:59:cb:c6:eb:cb:2e:e6:57:67:
         3b:1f:06:8a:cd:67:05:12:8b:a8:3d:40:32:89:14:93:e5:b2:
         8c:2a:96:3d:f5:4f:69:ca:90:6a:10:4d:19:db:be:e6:ce:7a:
         fc:ad:8a:9a:d3:b8:9f:51:57:7b:05:7a:f3:a6:40:f3:79:00:
         c1:7e:a7:98:7a:73:3f:d2:d9:91:7b:db:c5:96:6a:56:1e:74:
         ba:40:ff:89:1a:48:0c:27:7f:5f:51:67:58:96:9e:a7:48:87:
         ed:ee:e8:b7:30:84:37:31:4f:b4:c1:b4:0f:82:10:97:d7:2a:
         98:dc:b9:61:d4:b4:02:13:94:36:a7:91:f1:8c:95:8d:83:94:
         f5:9b:12:de:4c:7f:5c:e5:57:d2:b2:a3:75:37:40:1a:d9:11:
         f9:15:af:9e:1a:0b:b9:ca:8a:f7:7a:b8:c5:f6:d7:b3:f7:bb:
         73:fe:9f:06:a4:6f:07:5d:de:e2:43:27:81:db:a6:57:49:3c:
         00:c4:21:d1:73:bd:bb:bc:53:40:dc:6e:38:19:9a:fd:8b:2d:
         e7:74:a2:75:86:13:93:37:8e:c5:48:78:4d:0f:4b:5f:33:6f:
         74:8e:10:7f:5b:c0:00:ad:0b:f1:45:cd:78:2a:6d:fe:9f:a0:
         fc:3b:42:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:01 2025 by rpki-client